untuk warnet dibawah 12 PC…
1. Install dolo handycachenya di kompi desktop windows XP … terserah mau versi sp1, sp2 atau sp3
2. Buat topologi sebagai berikut :
Internet ——————— RB750 ———-Client + proxy handycache
dari modem mau bridge ppoe/ buat LAN tersendiri terserah (kebetulan saya pake ppoe)
Mikrotik input = terserah mo lan/ppoe; output = 192.168.50
Untuk client = 192.168.0.0/24 untuk proxy handycache = 192.168.0.30
3. saya anggap semua dah bisa menyeting mikrotiknya ya…
Seting ip — firewall —nat (untuk redirect port 80 ke web proxy mikrotik )
Code:
1 chain=dstnat action=redirect to-ports=8000 protocol=tcp src-address=!192.168.0.30 in-interface=ether2 dst-port=80 3 ;;; squid enable chain=srcnat action=src-nat to-addresses=192.168.0.50 to-ports=0-65535 protocol=tcp src-address=192.168.0.0/24 out-interface=ether2 6 ;;; Added by webbox chain=srcnat action=masquerade out-interface=pppoe-out1
4. buka ip —web proxy —web proxy setting, diseting sesuai gambar dibawah ini…
Port handycachenya diarahkan ke 8081 kalo yang default bisa diubah ke yang 8080 terserah anda…
5. buka ip—firewall—mangle (untuk penandaan)
Code:
[admin@HAZALIA] > ip firewall mangle pr Flags: X - disabled, I - invalid, D - dynamic 2 chain=output action=mark-packet new-packet-mark=Proxy-HIT passthrough=no out-interface=ether2 22 ;;; Point Blank chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=tcp dst-port=39190 23 chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=tcp dst-port=39100 24 chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=tcp dst-port=39110 25 chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=tcp dst-port=39220 26 chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=tcp dst-port=49100-49110 27 chain=game action=mark-connection new-connection-mark=Game passthrough=yes protocol=udp dst-port=40000-40010 49 chain=game action=mark-packet new-packet-mark=Game_pkt passthrough=no connection-mark=Game 50 chain=prerouting action=jump jump-target=game 51 ;;; POKER chain=forward action=mark-connection new-connection-mark=Poker_Con passthrough=yes protocol=tcp dst-address-list=LOADPOKER 52 chain=forward action=mark-connection new-connection-mark=Poker_Con passthrough=yes protocol=tcp content=statics.poker.static.zynga.com 53 chain=forward action=mark-packet new-packet-mark=Poker passthrough=no connection-mark=Poker_Con 54 ;;; LIMIT DOWNLOAD chain=forward action=mark-connection new-connection-mark=Download passthrough=yes protocol=tcp packet-mark=!Game_pkt connection-mark=!Poker_Con connection-bytes=175000-4294967295 55 chain=forward action=mark-packet new-packet-mark=Download_pkt passthrough=no packet-mark=!Game_pkt connection-mark=Download 56 ;;; BROWSE chain=forward action=mark-connection new-connection-mark=http passthrough=yes protocol=tcp in-interface=pppoe-out1 out-interface=ether2 packet-mark=!Game_pkt connection-mark=!Game connection-bytes=0-262146 57 chain=forward action=mark-packet new-packet-mark=http_pkt passthrough=no protocol=tcp connection-mark=http 58 ;;; UPLOAD chain=prerouting action=mark-packet new-packet-mark=Upload passthrough=no protocol=tcp src-address=192.168.0.0/24 in-interface=ether2 packet-mark=!ICMP-PM
Di sini saya pisahkan jalur game (pointblank), browsing, upload dan download berdasarkan port-portnya, ada juga website poker yang dipisahkan berdasarkan websitenya, mohon dipahami dan dikoreksi.
6. limiternya saya menggunakan queue tree dengan code sebagai berikut :
Code:
[admin@AZALIA] > queue tree print Flags: X - disabled, I - invalid 2 name="Browser" parent=MainBrowser packet-mark=http_pkt limit-at=0 queue=http priority=8 max-limit=232k burst-limit=0 burst-threshold=0 burst-time=0s 3 name="Game" parent=global-total packet-mark=Game_pkt limit-at=0 queue=Game priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s 4 name="Poker" parent=global-out packet-mark=Poker limit-at=0 queue=http priority=8 max-limit=232k burst-limit=0 burst-threshold=0 burst-time=0s 5 name="Download" parent=global-out packet-mark=Download_pkt limit-at=0 queue=default priority=8 max-limit=180k burst-limit=0 burst-threshold=0 burst-time=0s 6 name="Main Upload" parent=global-in limit-at=0 priority=7 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s 7 name="upload" parent=Main Upload packet-mark=Upload limit-at=0 queue=default priority=7 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s 8 name="MainBrowser" parent=ether2 limit-at=0 priority=8 max-limit=232k burst-limit=0 burst-threshold=0 burst-time=0s 9 name="Pmark" parent=ether2 packet-mark=Proxy-HIT limit-at=0 queue=default priority=8 max-limit=1M burst-limit=0 burst-threshold=0 burst-time=0s
Code:
[admin@AZALIA] > queue type pr 0 name="default" kind=pfifo pfifo-limit=50 1 name="ethernet-default" kind=pfifo pfifo-limit=50 2 name="wireless-default" kind=sfq sfq-perturb=5 sfq-allot=1514 3 name="synchronous-default" kind=red red-limit=60 red-min-threshold=10 red-max-threshold=50 red-burst=20 red-avg-packet=1000 4 name="hotspot-default" kind=sfq sfq-perturb=5 sfq-allot=1514 5 name="PFIFO-64" kind=pfifo pfifo-limit=64 6 name="Download" kind=pcq pcq-rate=180k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128 pcq-dst-address6-mask=128 7 name="http" kind=pcq pcq-rate=232k pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128 pcq-dst-address6-mask=128 8 name="Game" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address,dst-address,src-port,dst-port pcq-total-limit=2000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128 pcq-dst-address6-mask=128 9 name="Upload" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000 pcq-burst-rate=0 pcq-burst-threshold=0 pcq-burst-time=10s pcq-src-address-mask=32 pcq-dst-address-mask=32 pcq-src-address6-mask=128 pcq-dst-address6-mask=128 10 name="multi-queue-ethernet-default" kind=mq-pfifo mq-pfifo-limit=50 11 name="default-small" kind=pfifo pfifo-limit=10
Ups… jangan senang dolo… ternyata sistem ini sih masih banyak kelemahannya yang masih menjadi fokus kita perbaiki, terutama pengguna speedy :
1. Sistem brush speedy yang sangat jelek mengakibatkan lompatan ping sekitar 1-5 detik , saat digunakan berbarengan antara game online dan browsing, terutama website yang belum dicache, sangat dirasakan jika bermain game online yang sangat sensitif semisal pointblank, biasanya terjadi jika warnet lagi penuh….apalagi ada yang user hobi multi tab browser, saya belum dapat pencerahan untuk yang satu ini.
2. Website suka bengong atau gagal resolve dns (resolve dns-nya kurang bagus), tapi setelah refresh langsung jalan lagi.
itu saja dari saya semoga bermanfaat dan ditunggu kritik dan sarannya, terima kasih
NB : lupa nambahin keterangan :
1. ether2 = LAN
2. ppoe-01 / ether1 = WAN
gk jalan gan hc nya min trus knapa ni ya gan
BalasHapus